Privacy Policy

1. Who we are

Carry ("we", "us") provides a personal shift-coordination app for clinicians. This policy explains how the Carry app and this website handle personal data, in line with the Digital Personal Data Protection Act, 2023 ("DPDPA") of India.

2. What data the app processes

Carry is on-device by default. Task lists, patient references and shift notes are stored only on your phone and are never uploaded to our servers.

By design, the app records only bed numbers and patient initials — never full names, hospital IDs or contact details. Voice capture is processed on the device; no audio recordings are stored or transmitted.

3. Consent

Where processing does require your consent (for example, optional analytics or crash reports), we ask for it in clear, plain language, for a specific purpose, before any processing begins. You may withdraw consent at any time from the app's settings, with the same ease as giving it, as required by Section 6 of the DPDPA.

4. Your rights as a Data Principal

Under the DPDPA you have the right to:

• access a summary of your personal data and how it is processed;
• correction, completion and updating of your data;
• erasure of your data when it is no longer necessary;
• grievance redressal through an accessible point of contact;
• nominate another individual to exercise your rights.

Because your data lives on your device, most of these rights are exercisable directly in the app — deleting a shift removes it permanently.

5. Data retention & erasure

Shift data can be erased by you at any time and is retained only as long as you keep it. Uninstalling the app removes all locally stored data. We retain website contact-form correspondence only as long as needed to resolve your query.

6. Cross-border transfer

App data does not leave your device, so no cross-border transfer of personal data occurs through the app.

7. Children

Carry is intended for practising clinicians and is not directed at children. We do not knowingly process data of individuals under 18.

8. Personal data breach

In the unlikely event of a personal data breach involving data we hold, we will notify the Data Protection Board of India and affected users as required by the DPDPA and its rules.

9. Grievance redressal

For questions, requests or grievances, contact our Grievance Officer via the contact page. We aim to respond within the timelines prescribed under the DPDPA. If unsatisfied, you may escalate to the Data Protection Board of India.